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Abstract — We prove an upper bound on the private capacity 
of the single-mode noiseless bosonic wiretap channel. Combined 
with a previous lower bound, we obtain the low photon-number 
asymptotic expression for the private capacity. We then show 
that the multiple-mode noiseless bosonic wiretap channel is 
equivalent to parallel single-mode channels, hence the single- 
mode bounds can be applied. Finally, we consider multiple- 
spatial-mode propagation through atmospheric turbulence, and 
derive a private-capacity lower bound that only requires second 
moments of the channel matrix. 

I. Introduction 

In a variety of emerging applications, there is a need for 
secure transmission over optical links. In such settings, a nat- 
ural approach to providing security against computationally- 
unbounded attacks is to exploit the physical layer, and the 
corresponding natural information theoretic model for analysis 
is the basic bosonic wiretap channel. In practice, a variety 
of regimes are of interest. While for optical links photon 
efficiency (b/photon) has tended to be of greater importance 
than spectral efficiency (b/s/Hz), there is growing interest in 
the latter as well. When the photon and spectral efficiency 
requirements are simultaneously high, multiple spatial modes 
are required [1]. Accordingly there is a need to more fully 
understand the capacity of both single-mode and multiple- 
mode bosonic wiretap channels in such regimes. Moreover, 
in practice, free-space propagation is strongly affected by 
turbulence, the effect of which on private capacity is also not 
yet well understood. 

In this paper, we first prove an upper bound on the private 
capacity of the single-mode bosonic wiretap channel. Combin- 
ing our upper bound with the previously-derived lower bound 
[2], we obtain the single-mode private capacity's low photon- 
number asymptotic behavior We then treat the multiple-mode 
bosonic wiretap channel, obtaining results that tightly bracket 
the private capacity when both high photon efficiency and high 
spectral efficiency are required. Finally, we exploit convexity 
and majorization to obtain a lower bound on the multiple- 
spatial-mode private capacity for the turbulent channel that 
only requires second moments of the channel matrix, and thus 
may be tight for near-field operation in which both high photon 
efficiency and high spectral efficiency are obtained. 

II. Notation 

We use a lower-case letter like x to denote a number, and an 
upper-case letter like X to denote a random variable (except 



for some special cases, e.g., C denotes the capacity). We use 
a boldface lower-case letter like a; or to denote a vector, 
and a boldface upper-case letter like X or /f to denote a 
random vector We use a font like t to denote a matrix, and 
a corresponding upper-case letter like T to denote a random 
matrix. Finally, we use a font like A to denote a Hilbert space, 
a font like a to denote the annihilation operator on A, and 
to denote a density operator on A. 

All logarithms in this paper are natural logarithms, and 
information is measured in nats unless stated otherwise. 

III. The Single-Mode Channel 

A. Channel Model and Previous Work 

Let a, b, and e denote the annihilation operators on the 
Hilbert spaces of Alice, Bob, and Eve, respectively. The single- 
mode noiseless bosonic wiretap channel can be described in 
the Heisenberg picture by the beam splitter relation 



b = y^a 



(la) 
(lb) 



e = y^l — rja - 

where 77 e [0, 1], and where v is the annihilation operator 
of the noise mode, which we assume to be in its vacuum 
state. Note that this is a worst-case model in the sense that 
we assume Eve can obtain all photons that do not reach Bob. 
We impose an average-photon-number constraint on the input 

(a'I'a) < n, (2) 

where the expectation is averaged over all codewords. Denote 
the classical private capacity of the channel (1) under con- 
straint (2) by Cp{ri, n). It is shown in [2] that 



with 



L{r],n) 



Cp(?7,n) > L{r],n), 



g{{l - ri)n) , 




V > 1/2, 
otherwise. 



where 



g{x) = (1 + 2;) log(l + x) — X log a; > 



(3) 



(4) 



(5) 



is the maximum entropy of a single-mode bosonic state whose 
expected photon-number equals x, achieved by the thermal 
state: 

P = y^7^^TT;iTTl")H, (6) 



n— 



where |n) denotes the number state containing n photons. 

It is conjectured in [2] that (3) holds with equahty, as 
a consequence of the conjectured "Entropy Photon-Number 
InequaUty". 

As n tends to infinity, the lower bound (3) is tight and agrees 
with the private-capacity formula derived in [3]: 

Cp(?7, oo) = max {0, log(??) - log(l - rj)} . (7) 

B. An Upper Bound on C'p{ri,h) 

Theorem 1: The classical private capacity Cp{r],n) is 
bounded by 



Cp{'n,n) < U{r],n), 



(8) 



where 



10, otherwise. 

Before proving Theorem 1, we first prove a simple lemma 
which says that Cp{ri,n) is monotonic in rj. 
Lemma 1: For any 1 > r?i > r?2 > and any n > 0, 



(10) 



Proof: Let Mi and denote the output Hilbert spaces of 
Bob and Eve, respectively, of the channel with transmissivity 
(from Alice to Bob) rji, i = 1,2. Observe that B2 is stochas- 
tically degraded from Bi. Indeed, when we pass the state on 
Bi through a beam splitter of transmissivity 772 /?7i, we obtain 
a state that is identical to the one on B2. Therefore, a Bob 
having access to Bi can always pass his state through this 
beam spUtter and then make the same measurement as a Bob 
having access to B2, thus he can do at least as well as the 
latter. Similarly, Ei is stochastically degraded from E2, and 
an Eve having access to Ei can do at most as well as an Eve 
having access to E2. Hence we obtain (10). ■ 

Proof of Theorem 1: By Lemma 1, we only need to prove 
the case where tj > 1/2. In this case the wiretap channel 
is stochastically degraded. To see this, we pass Bob's state 
through another beam splitter to obtain output modes with 
annihilation operators e' and c given by 



e' = ^/n'b + Vl - V'v', 
c = yi - - ^/rfv', 



(11a) 
(lib) 



v: |0) 



v':\0) 



V = (1 - v)/v 



Fig. 1. Illustration of the degraded wiretap channel. 



< max 

(dtd)<n 



S [ff') + S (p^) - S {f^J 



(16) 

(17) 
(18) 



where S{p) = — Tr[plog(p)] is the von Neumann entropy. The 
steps are justified as follows: (12) follows from [4, Theorem 
2]; (13) from the fact that and p^' are identical; (14) 



because |0)(0| is a pure state; (15) because the beam splitter 
(11) is a unitary transformation from p"^ to p^^; (16) from 
the subadditivity of von Neumann entropy; and (18) because, 
according to the channel laws (1) and (11), 



so 



(c^c) = (2?7 - l){a^a) < (2r? - l)f 



(19) 



(20) 



C. Analysis of the Bounds 

Combining the upper and lower bounds (8) and (3) and 
letting n tend to zero, we obtain the asymptotic expression 
for Cp(?7,n) when n is small. 

Theorem 2: The private capacity Cp{ri,n) satisfies 

Cp(r?, n) = (277 -l)n log ^ + 0(n), (21) 



where 77' = (1 — 77) /r/ e [0, 1) as we assume 77 > 1/2, and v' where 0{n) is a function of 77 and n satisfying 
is in its vacuum state. Then the states p^ and p^ are identical 
for any input state p*. See Fig. 1. 
We now prove (8) as follows: 

s (/)] 



Cp{r], n) 



max \S [f? 

(dtd)<n 



max 

(d^d)<n 

max 

{d'I'd) <n 

max 

(dtd)<n 



S{p^ 



s 



|0)(0r)-5(/') 

[f^) - s [f) 



(12) 
(13) 
(14) 
(15) 



77 (1 -h log - ) - (1 - n) (1 + log -T—] ^ lini 

<lh^^<(277 -l)fl+log-^y (22) 
nio n \ 2?7 — 1 y 

Theorem 2 shows that the photon efficiency, Cp{ri,n)/n, 
behaves like log(l/n) plus some constant for small n. We 
numerically compare the upper and lower bounds (8) and (3) 
on the photon efficiency against n for 77 = 0.7 in Fig. 2, and 
against 77 for fi = 10~^ in Fig. 3. 
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Fig. 2. Comparison of the upper and lower bounds on the photon efficiency 
(in bits per photon) computed from (8) and (3) for = 0.7. 




Fig. 3. Comparison of the upper and lower bounds on the photon efficiency 
(in bits per photon) computed from (8) and (3), for n = 10~'^. 



IV. The Multiple-Mode Channel 

A. Channel Model 

Consider a multiple-mode noiseless bosonic wiretap channel 
in which Alice's, Bob's, and Eve's modes are described 
by annihilation operators {di,...,am}, {bi,...,bk}, and 
{ei, . . . ,ei}, respectively. The channel law is a multiple-mode 
beam splitter relation, i.e.. 



bk 
ei 



\ei J 



ai 



Vi 



\ 



(23) 



\ Vk+l-m ) 



where 



(24) 



is a unitary matrix, and where \y\, .... Ufe+;-m} are annihi- 
lation operators of vacuum-state noise modes. Note that this 



is again a worst-case model in which Eve obtains aU photons 
that do not reach Bob. 

B. Simplification of Channel Model 

The next theorem shows that any multiple-mode noiseless 
bosonic wiretap channel is equivalent to a group of parallel 
(i.e., noninterfering) single-mode channels. 

Theorem 3: The channel (23) is equivalent to a group of 
parallel single-mode channels: 

K = x/ma', + x/l - mv-. (25a) 

(25b) 



e'i = - Via'i - VViv'i 



where i G {1, . . . , m}, and where {rji, . . . , r]m} are the 
eigenvalues of tl^ha- 

Proof: From the unitarity of the transition matrix t we 

have 



tt 

tt 



tt 

tt 



tab 



^vb 



■^(k+l)x{k+l) 



so 



j-t 4- 1 mxm 



(26) 



(27) 



This implies that tj^^tab and tt^toe are simultaneously diag- 
onalizable. More specifically, there exists a unitary matrix v 
such that 



vttt t,,v = 1' 



- d, 



(28) 
(29) 



where d is an m x m diagonal matrix whose diagonal terms are, 
by assumption, 771, ... , rj„i. Therefore the matrices tab and tae 
have the same right singular vectors, and their singular-value 
decompositions can be written as 



tab = UabSabV 
tae ^ae^acy 



(30) 
(31) 



where Uab and Uae are unitary matrices, Sa& is a fc x m 
diagonal matrix whose (nonzero) diagonal entries are (the 
nonzero elements of) {y/rji, . . . , ^/ff^}, and Sae is an I x m 
diagonal matrix whose (nonzero) diagonal entries are (the 
nonzero elements of) — r]i, . . . , \/l — r]m}- 

Now we observe that vt does not affect the private capacity 
of this channel. This is because Alice can perform v on the 
input light modes that she prepared to cancel vt simultaneously 
for Bob and Eve. Hence we can always set vt to be l™^'" 
without affecting the private capacity. Similarly, Uab and Uae 
can be canceled by Bob and Eve, respectively, so they can 
also be set to identity matrices without changing the private 
capacity. We thus conclude that the private capacity of (23) is 
the same as that of the parallel-mode channel (25). ■ 

C. Capacity Results 

Denote the private capacity of the channel (23) under the 
average-photon-number constraint 



< n 



(32) 



i=l 



by C^(t, n). By Theorem 3, it equals the capacity of the 
channel (25) under constraint 



(33) 



i=l 



which we denote by C^{r), n) where r] = {r]i, . . . , r^mY ■ We 
first show that C^irj, n) is achievable by coding independently 
for each mode in (25). 

Theorem 4: Coding independently for each mode in (25) is 
optimal: 

m 

C^{rj,n)= max VCp(%,ni). (34) 

ni>0, i=l,...,m, ' 
I27Li ni=n »=1 

Proof: Let t]' be 

rji, Tji > 1/2, 



Vi 



1/2, ??, <l/2. 



(35) 



By extending Lemma 1 to the multiple-mode scenario, we 
have 

C^{ri,n)<C^{ri',n). (36) 

Next denote by C^{r]',n), where n = (fii, . . . ,nm)^. the 
capacity of the parallel-mode channel with transmissivities rj' 
and individual photon-number constraints 

{a^a\)<ni, i = l,...,m, 



(37) 



then 



C^{r)',n)= max C^{r)',n). (38) 

n: ni>0, i— l,...,m 

J27Li rii=n 

To simpUfy Cp^{r}' ,n), note that each individual channel of 
this parallel-mode channel is stochastically degraded, so the 
private capacities of the individual channels are additive [4]: 



(39) 



i=l 



We thus have 

Cf{il,h)< max (40) 

ni>0. 2— l,...,m. ^ — ^ 

= max Cp{T]i,ni), (41) 

ni>0, i=l,...,m, '—^ 

where the equality follows because the optimal photon-number 

allocation is the same for the right-hand sides of both (40) and 
(41), which assigns zero photon to the modes where < 1/2 
(i.e., where tj^ = 1/2). 

On the other hand, by coding independently, and using the 
optimal code for each mode, we can achieve the lower bound 

Cf{r],n)> max V Cp(%,ni). (42) 

ni>0. 2=1,. ..,m, '—^ 

Combining (41) and (42) proves (34). ■ 

Now it is straightforward to extend the upper and lower 
bounds (8) and (3) to the multiple-mode case. In particular. 



in the limit as n approaches zero, it is easy to check that 
the optimal photon-number allocation is the same for both 
the upper and the lower bounds, and it sends all photons in 
the mode with the largest transmissivity. We hence have the 
following asymptotic capacity expression. 

Theorem 5: The capacity of the channel (23) under con- 
straint (32) satisfies 

C^(t, n) = (2r?„,ax - l)nlog ^ + 0(n), (43) 

where ?7max is the largest eigenvalue of t^(,ta(„ and where the 
term 0(n) is at most linear in n: 



lim 

fi4,0 



0(n) 



< 00. 



(44) 



As an example of our multiple-mode private capac- 
ity bounds, consider the use of m = 10"^ high- 
transmissivity spatial modes with near-equal, near-unity eigen- 
values, (771, . . . , 77m)^, as exist for Lm vacuum-propagation 
at wavelength A between coaxial diameter- £> circular pupils 
satisfying {ttD^ /4XL)^ » m [5]. Figure 4 shows that our 
results provide tight bounds on the photon efficiency and 
spectral efficiency for this example. 
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Fig. 4. Comparison of the upper and lower bounds for photon efficiency 
versus spectral efficiency for m = 10^ spatial modes each with r) = 0.9. 



V. Channels with Turbulence 
A. Channel Model 

Consider a multiple-mode wiretap channel in which the 
transition matrix t in (24) is replaced by a random matrix T. 
We assume a coherent scenario where Alice and Bob know the 
reahzation of To;,. Then, as discussed in Section IV-B, they 
also know the other parts of T, namely, Tae, T„f, and T„e 
except for possible unitary transformations that are irrelevant 
to capacity calculations. We impose the constraint that the 
average number of transmitted photons in every channel use 
must not exceed n, irrespective of the realization of Tab- 
Denote by {.ffi, . . . , -ffm} the random eigenvalues of T\f^Tah, 



then the capacity of this channel can be expressed as 



Cp"(T,n) 



max 

iVi>o, ie{i,. 



Cp{Hi,Ni) 



(45) 



For near-field operation — wherein the turbulent channel will 
support multiple spatial modes with appreciable eigenvalues 
[6] — ^the exact distribution of Tab is unavailable. Instead, we 
can only compute the second-moment matrix E Tj^^Tab . Our 
goal in this section is to find good bounds on the private 
capacity of the multiple-mode wiretap channel with turbulence 
expressed using E 



B. Lower Bound on Private Capacity 

To derive a lower bound on the private capacity of this 
channel, we need two lemmas. 

Lemma 2: The single-mode lower bound L{r], n) as defined 
in (4) is convex in r; for 77 G [0, 1] and for every n > 0. 

Proof: Since L(r/, n) is the constant zero and is hence 
convex in ry for 77 e [O, ^] , we only need to check convexity 
for 77 G (i, 1] . In the latter region, 



L{'n,n) = g{r]n) - g{{l-r])n), »? e 1 
and its second derivative with respect to r] can be computed: 



drf 



>0, 



1 



1 



(1 + (1 — 7?)n)(l — ri)n (1 + rjn)rjn ) 



(47) 



(48) 



Hence we conclude that L{r\,n) is convex in 77 on [0, 1] and 
for every n > 0. ■ 
Lemma 3: The multiple-mode lower bound 



max L{r]i,ni) 

ni>0, ie{l,...,m} 



(49) 



is both convex and Schur-convex in 77. 

Proof: First note that L^{ri,n) is symmetric in the 
elements of 77, hence convexity implies Schur-convexity [7]. 
To prove convexity, consider any two vectors 77", rj'' and their 
mean ry'^ = {r]°- + r]'')/2. Suppose that n* achieves L^{r]'^, n): 



L^{rj^,n) = J2Hvt,n*). 



(50) 



i=l 



We have 

(L^(r,^n) + L^(r,^7^))/2 

^L(77?,n*)+^L(77^n*) /2 (51) 



> 



i=l 



> 



1=1 



(52) 



(53) 



Here: (51) follows by lower-bounding the maxima over n with 
the specific choice n = n*; and (52) by the convexity of 
L{-, n) as in Lemma 2. Hence L^{ri, n) is convex in tj. ■ 
We are now ready to prove a lower bound on the private 
capacity of the multiple-mode wiretap bosonic channel under 
turbulence which can be expressed using E 



Theorem 6: Let {fii, . . . 

fabj , then 



ments of E 



fim} denote the diagonal ele 



(7^(T,n) > L^(/x,n 



M/ 



(54) 



where L^{-, •) is defined as in (49). 

Remarks: As discussed in Section IV-B, the choice of basis 
for T does not affect the private capacity of our channel model, 
so Theorem 6 holds when /x denotes the diagonal terms of 
in any basis. In particular, it holds if /x denotes 



the eigenvalues of E 



, and this choice of fi provides 



the tightest bound obtainable m this manner. Toward that end, 
the turbulence calculations from [8] will permit this lower 
bound to be evaluated for transmitters that use focused-beam, 
Hermite-Gaussian, or Laguerre-Gaussian spatial modes. 

Proof: Let {Mi, . . . , Mm} denote the random diagonal 
(46) elements of the random matrix T^j^Tob. We have the following 
chain of inequalities: 

C7^(T,n) > E[L^(Jf,n)] (55) 

>E[L^(M,n)] (56) 

>L^(/x,n). (57) 

Here: (56) follows by the Schur-convexity of L^{-, n) and the 
fact that the eigenvalues {Hi, ... , Hm} majorize the diagonal 
elements {Mi, . . . , Mm}', and (57) follows by the (normal) 
convexity of L'^( -,71). ■ 
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